MEDIUM
apache-cxf: SAML SSO processing is vulnerable to wrapping attack
Published Nov 18, 2015
4.0
MEDIUMCVSS 2.0
EPSS 5.70%
Description
The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack."
Affected products
No data.
No data.
Red Hat JBoss Fuse 6.2
n/a
Fixed · RHSA-2016:0321
Red Hat JBoss A-MQ 6
cxf
Not affected
Red Hat JBoss Enterprise Application Platform 6
Web Services
Will not fix
Red Hat JBoss Fuse 6
cxf
Affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat JBoss Fuse 6.2 | n/a | Fixed | RHSA-2016:0321 |
| Red Hat JBoss A-MQ 6 | cxf | Not affected | n/a |
| Red Hat JBoss Enterprise Application Platform 6 | Web Services | Will not fix | n/a |
| Red Hat JBoss Fuse 6 | cxf | Affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
4.0 MEDIUM NVD
AV:N/AC:L/Au:S/C:N/I:P/A:N
Access Vector Network
Access Complexity Low
Authentication Single
Confidentiality Impact None
Integrity Impact Partial
Availability Impact None
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
5.70% 0.05696
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.05696
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (9 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 5.70% (0.05696) | 92.77th | v5 (v2026.06.15) |
| Jun 15, 2026 | 5.70% (0.05696) | 91.99th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.25% (0.00248) | 46.12th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.11% (0.00114) | 46.61th | v3 (v2023.03.01) |
| Jul 10, 2024 | 0.11% (0.00114) | 45.35th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.11% (0.00114) | 43.29th | v3 (v2023.03.01) |
| Mar 6, 2023 | 3.12% (0.03115) | 83.83th | v2 (v2022.01.01) |
| Apr 1, 2022 | 3.12% (0.03115) | 82.24th | v2 (v2022.01.01) |
| Feb 4, 2022 | 3.12% (0.03115) | 64.91th | v2 (v2022.01.01) |
References (27)
- http://cxf.apache.org/security-advisories.data/CVE-2015-5253.txt.asc x_refsource_CONFIRMVendor Advisory
- http://cxf.apache.org/security-advisories.data/CVE-2015-5253.txt.asc?version=1&modificationDate=1447433340000&api=v2
- http://rhn.redhat.com/errata/RHSA-2016-0321.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://www.openwall.com/lists/oss-security/2015/11/14/1 mailing-listx_refsource_MLISTMailing ListThird Party Advisory
- http://www.securitytracker.com/id/1034162 vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
- https://access.redhat.com/security/cve/CVE-2015-5253 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1282411 Issue Tracking
- https://git-wip-us.apache.org/repos/asf?p=cxf.git%3Ba=commitdiff%3Bh=845eccb6484b43ba02875c71e824db23ae4f20c0 x_refsource_CONFIRM
- https://git-wip-us.apache.org/repos/asf?p=cxf.git;a=commitdiff;h=845eccb6484b43ba02875c71e824db23ae4f20c0
- https://github.com/advisories/GHSA-3336-h95j-hvvf Advisory
- https://github.com/apache/cxf/commit/02245c656941f28b6b2be5e461e6db04a70d2436
- https://github.com/apache/cxf/commit/1c2a53080004d6ce275f2e70f46a0098d4140787
- https://github.com/apache/cxf/commit/845eccb6484b43ba02875c71e824db23ae4f20c0
- https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E
- https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E
- https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E
- https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E
- https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E
- https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E
- https://nvd.nist.gov/vuln/detail/CVE-2015-5253
- https://www.cve.org/CVERecord?id=CVE-2015-5253
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Nov 18, 2015
Updated Aug 6, 2024
Reserved Jul 1, 2015
Link CVE-2015-5253
CISA Vulnrichment
GHSA-3336-H95J-HVVF Updated n/a